From your first SOC 2 to the whole estate. Every plan runs every scanner; you pay by the size of the company, never per login.
Billed annually by invoice. Monthly available on SOC 2 Startup.
See every scanner run against your own estate. Outputs unlock on a paid plan.
Start free trialYour first SOC 2, with the scanners the auditor will ask about built in.
Get startedThree frameworks, three cloud accounts, threat intelligence and ten developers.
Get startedFive frameworks, ten cloud accounts, brand protection and AI security.
Contact salesEvery framework, MSP tooling, custom retention and dedicated onboarding.
Contact salesPlans are banded by the number of people in your company, the same population an auditor samples from your directory. Logins are unlimited on every paid plan, so your whole security, engineering and compliance team can work in the platform without counting seats.
Every plan runs every scanner. What changes is how much of your estate it covers and which outputs it unlocks.
| Feature | Free Trial$0Start free trial | SOC 2 Startup$9,000Get started | Growth$24,000Get started | Business$54,000Contact sales | Enterprisefrom $110,000Contact sales |
|---|---|---|---|---|---|
| FrameworksSOC 2, ISO 27001, PCI DSS, NIST, GDPR, DORA, NIS2 and more | SOC 2 card only | 1 | 3 | 5 | All 11 |
| Employees coveredA user is a company employee, never a login | Up to 10 | Up to 50 | Up to 200 | Up to 1,000 | Unlimited |
| Readiness score per framework | |||||
| Policies, attestations and evidence | |||||
| Per-resource evidence from every scanner | |||||
| Audit package and auditor portal | |||||
| Risk register with acceptance workflow | |||||
| Vendor register for the auditor | 25 vendors | Included | Included | Included | |
| Cloud accounts (AWS, Azure, GCP) | 1 | 1 | 3 | 10 | 25 |
| Misconfiguration checks (CSPM) | Counts + top findings | ||||
| Identity and access with blast radius (CIEM)What breaks if a grant is revoked, and who can reach a crown jewel | |||||
| Toxic combinations and crown-jewel accessors | |||||
| Container image scanning | |||||
| Attack-path graph across cloud and endpoints | |||||
| Data classification | |||||
| Repositories / contributing developers | 1 repo | 5 developers | 10 developers | 50 developers | 200 developers |
| Dependency scanning (SCA) and secrets | |||||
| Static analysis (SAST) and infrastructure as code | |||||
| Dynamic testing (DAST)Active scanning only after DNS-verified domain ownership | 1 target | 1 target | |||
| AutoFix with validated backports | Add-on | Add-on | |||
| Pull-request decoration and CI gating | |||||
| Root domains monitored | 1 | 1 | 1 | 3 | 10 |
| Subdomain discovery and passive fingerprinting | |||||
| Posture scorers (DNS, TLS, headers, email, buckets) | |||||
| CVE correlation on discovered services | |||||
| Certificate-transparency phishing discovery | |||||
| EndpointsLinux, macOS and Windows agent | 3 | 25 | 50 | 250 | 1,000 |
| Software inventory and CVE matching | |||||
| Patch management with policies and maintenance windows | |||||
| Host hardening benchmarksEvaluated on the host; only pass/fail leaves it | |||||
| AI tool and MCP server inventory | |||||
| AI Security: agent governance and AI-traffic DLP | |||||
| Vendors | 5 listed | 25 in register | 50 scanned | 250 scanned | Unlimited |
| Continuous vendor scanning | |||||
| Questionnaires and vendor portal | |||||
| Breach correlation | |||||
| Threat intelligence dossiers and narratives | |||||
| Phishing detection and takedown | 1 brand | 3 brands | |||
| Brand and executive impersonation | 1 brand | 3 brands | |||
| Logins | 2 | Unlimited | Unlimited | Unlimited | Unlimited |
| Unified asset inventory | Counts only | ||||
| Exports and scheduled reports | |||||
| Integrations and APISIEM, ITSM, Jira, Linear, Slack, TAXII, REST | Add-on | ||||
| Single sign-on | |||||
| MSP multi-tenant | |||||
| Data retention | 30 days | 90 days | 180 days | 365 days | Custom |
Every allowance can be extended. Prices are per year and are added to your invoice.
Build a custom package with only the capabilities you need. Start with the base platform and add individual modules — threat intel, EASM, phishing, brand protection, supply chain, vulnerability remediation, cloud security, compliance, or integrations.
Enterprise includes MSP multi-tenant tooling, custom retention and dedicated onboarding. Tell us about your estate and we will size it with you.
Stop paying up to $350K a year across fragmented point solutions. Get unified visibility, cross-module correlation and AI-powered insights from a single platform.